[issue23177] test_ssl: failures on OpenBSD with LibreSSL

Christian Heimes added the comment: I have fixed all libressl related test failures while I added support for OpenSSL 1.1.0. -- nosy: +christian.heimes resolution: -> fixed status: open -> closed ___ Python tracker

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: I don't care so much of issues introduced by LibreSSL, I don't understand why they broke the API. For me, it doesn't seem right to have a version different if it's a number or if it's a string: OPENSSL_VERSION_NUMBER should be consistent with OPENSSL_VERSION_I

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

Remi Pointel added the comment: Hi, maybe we should add the LIBRESSL_ information available in opensslv.h (as it has be done for OpenSSL): $ grep LIBRESSL /usr/include/ssl/opensslv.h #define LIBRESSL_VERSION_NUMBER 0x2003L #define LIBRESSL_VERSION_TEXT "LibreSSL 2.3.0" #define OPENSSL_V

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: _ssl cannot be compiled with LibreSSL anymore (on OpenBSD 5.5) because of ALPN: see issue #23329. -- ___ Python tracker ___ ___

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: > Proper way would be to check for LIBRESSL_VERSION_NUMBER string, FreeBSD > modifies the OpenSSL version number to indicate its compatibility level (as > stated in commit log) Please see the unit test: it checks that the version number and version string are

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

Bernard Spil added the comment: LibreSSL defines in opensslv.h #define LIBRESSL_VERSION_NUMBER 0x2000L #define OPENSSL_VERSION_NUMBER 0x2000L And FreeBSD replaces #define OPENSSL_VERSION_NUMBER 0x1000107fL Proper way would be to check for LIBRESSL_VERSION_NUMBER string, FreeBSD modifie

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: > Note that the FreeBSD port modifies the OPENSSL_VERSION_NUMBER and sets the > version number to 1.0.1g. Maybe we should remove the test on OPENSSL_VERSION (string) for LibreSSL? -- ___ Python tracker

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

Bernard Spil added the comment: Note that the FreeBSD port modifies the OPENSSL_VERSION_NUMBER and sets the version number to 1.0.1g. https://svnweb.freebsd.org/ports?view=revision&revision=361642 -- nosy: +spil ___ Python tracker

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

Roundup Robot added the comment: New changeset 05d7550bd2d9 by Victor Stinner in branch 'default': Issue #23177: Document that ssl.RAND_egd() is not available with LibreSSL https://hg.python.org/cpython/rev/05d7550bd2d9 -- nosy: +python-dev ___ Python

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: It looks like OPENSSL_VERSION_NUMBER is consistent with OPENSSL_VERSION_INFO (version 2.1). But the OPENSSL_VERSION contains a different version (2.0). It looks like an issue in LibreSSL. == F

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

STINNER Victor added the comment: changeset: 94041:87976d72fd5c user:Victor Stinner date:Tue Jan 06 11:51:06 2015 +0100 files: Lib/test/test_ssl.py description: test_ssl: add more debug to investigate test_openssl_version() failure on OpenBSD with LibreSSL. -- _

[issue23177] test_ssl: failures on OpenBSD with LibreSSL

New submission from STINNER Victor: (See also the issue #21356.) http://buildbot.python.org/all/builders/x86%20OpenBSD%205.5%203.x/builds/1242/steps/test/logs/stdio == FAIL: test_options (test.test_ssl.ContextTests) ---